Oauth
- Written for
- + Written for
- Deprecated
- + Deprecated
- Applies to
- + Applies to
Oauth
Frontend API — publishable key (x-publishable-key) plus the user session.
7 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.
Method & path | Idem | Explanation |
|---|---|---|
| Telegram Login Widget sign-in: verify the widget payload HMAC against the bot token and complete the sign-in, honouring the MFA gate. | |
| Sign-in with Ethereum (EIP-4361): mint a single-use nonce bound to a new attempt. | |
| Sign-in with Ethereum (EIP-4361): verify a signed message (domain, chain, nonce, validity, EIP-191/EIP-1271) and complete the sign-in, honouring the MFA gate. | |
| Sign-in with Solana (SIWS): mint a single-use nonce bound to a new attempt. | |
| Sign-in with Solana (SIWS): verify a signed message (domain, network, nonce, validity, ed25519 signature) and complete the sign-in, honouring the MFA gate. | |
| Sign-in with Farcaster (SIWF): mint a single-use nonce bound to a new attempt. | |
| Sign-in with Farcaster (SIWF): verify a signed SIWE message (domain, chain, nonce, validity, signature), prove on-chain that the custody address owns the claimed FID (Optimism ID Registry), and complete the sign-in, honouring the MFA gate. |